Archer C6 remaps ports, not good for 3CX
Archer C6 remaps ports, not good for 3CX
Hi,
Just had to switch one of my customers to a new router, which is an Archer C6.
I opened the ports needed for 3CX, disabled SIP ALG and even SPI Firewall in order to make sure it wasn't interfering, but when I launch the FW check on 3CX, it tells me that ports are remapped.
How can I make this router forward the right port that I'm asking for, and which is properly configured?
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Here's a guide for configuring port-forwarding (virtual server) on Archer C6 (Case 2).
Make sure that your C6 WAN (Internet IP address) is a public so the port-forwarding can work.
Put some screenshots of your Archer C6 port-forwarding configuration.
- Copy Link
- Report Inappropriate Content
Hi, thanks for sharing!
This is exactly what I did, and the WAN IP is indeed public.
I have exactly the same config as the previous router: 9 cameras with redirects from port 8170 to 8179 to internal port 37777 (each has its own external port of course), and other ports for SIP, which are exactly the same on the WAN and LAN side...
The router seems to act as if I didn't ask to redirect WAN port 5060 to LAN port 5060 for 192.168.1.200. Instead, it uses a random port number in the 20000 to 21000 range.
- Copy Link
- Report Inappropriate Content
Hi@Overtech_NC,
Thank you for contacting our community.
May I know if your network topology diagram is as follows:
ISP modem—router )))((( client devices
(Note: — stands for wired connection,)))((( stands for wireless connection )
Could you please take screenshots with the settings of port forwarding and send them here?
Please tell me what is the WAN IP of your router?
Here are some tips for you if port forwarding doesn't work:
1. Make sure the server is accessible from the internal network.
2. Make sure your router obtains the public WAN IP address, if your WAN IP is not a public one, port forwarding will not work. (CGNAT address is also private IP address that ranges from 100.64.0.0 to 100.127.255.255.)
3. Check the firewall settings of your server, make sure it allows traffic from the outside Internet.
You may check more detailed instruction following the FAQ: Why port forwarding feature is not working on my Wi-Fi router?
- Copy Link
- Report Inappropriate Content
Hi @Joseph-TP ,
Everything in this network is connected via Ethernet, apart from smartphones and a laptop.
No ISP in our country is using CGNAT, all WAN IPs are public.
Port forwarding is as follows:
Server is indeed accessible, and its config is fine. As a reminder, everything was properly working and configured with the previous router, nothing has changed other than that.
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
@terziyski
I tried with and without uPnP, same thing.
I came to a conclusion that Archer C6 doesn't allow port preservation.
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
Same problem here, using an Archer MR200 4G router.
Turned off all under Security.
Turned off all under ALG.
Turned off uPnP.
Under NAT, Virtual servers, routed all necessary ports to/from my local 3CX server.
3CX Firewall checker fails on almost all tests, see below.
Have not had any such serious problems with other routers.
Any way to solve this?
-----------------------------------
resolving 'stun-eu.3cx'... done
resolving 'stun2.3cx'... done
resolving 'stun3.3cx'... done
resolving 'sip-alg-detector'... done
testing 3CX PhoneSystem 01 SIP Server... failed (How to resolve?)
stopping service... done
detecting SIP ALG... not detected
testing port 5060... full cone test failed (How to resolve?)
starting service... done
testing 3CX PhoneSystem Media Server... failed (How to resolve?)
stopping service... done
testing port 5090... full cone test failed (How to resolve?)
testing ports [9000..9398]... failed (How to resolve?)
testing port 9000... full cone test failed (How to resolve?)
testing port 9002... full cone test failed (How to resolve?)
testing port 9004... full cone test failed (How to resolve?)
testing port 9006... full cone test failed (How to resolve?)
etc...
-----------------------------------
- Copy Link
- Report Inappropriate Content
@Rob-_- Apart from using another router or a bare-metal FW, I see no other option. The majority of TP-Link routers seem not to handle port preservation properly
- Copy Link
- Report Inappropriate Content
@Overtech_NC Thanks for your reply. Any suggestions for a low budget 4G router that works properly when it comes to NAT?
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 616
Replies: 12
Voters 0
No one has voted for it yet.